foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ipsilon: Add OIDC key

Browse source
This commit is contained in:
Timo Makinen 2024-12-17 22:00:21 +00:00
parent 1bab946019
commit 46c41d2d77
3 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/ipsilon/templates/ipsilon-container.service.j2
View file

@ -13,6 +13,7 @@ ExecStart=/usr/bin/podman run \
--volume={{ tls_certs }}/ca.crt:/etc/ssl/certs/ca.crt:ro \
--volume={{ tls_certs }}/{{ inventory_hostname }}.crt:/etc/ssl/certs/{{ inventory_hostname }}.crt:ro \
--volume={{ tls_private }}/ipsilon.key:/etc/ssl/private/{{ inventory_hostname }}.key:ro \
--volume={{ tls_private }}/openidc.key:/etc/ipsilon/openidc.key:ro \
ipsilon:latest
ExecStop=/usr/bin/podman stop --ignore ipsilon
ExecStopPost=/usr/bin/podman rm -f --ignore ipsilon

3
roles/ipsilon/templates/ipsilon-container.sysconfig.j2
View file

@ -5,3 +5,6 @@ IPSILON_DB_HOST="sqldb02.home.foo.sh"
IPSILON_DB_CA="/etc/ssl/certs/ca.crt"
IPSILON_DB_KEY="/etc/ssl/private/{{ inventory_hostname }}.key"
IPSILON_DB_CERT="/etc/ssl/certs/{{ inventory_hostname}}.crt"
IPSILON_HOSTNAME="idp.foo.sh"
IPSILON_OPENIDC_KEYID="{{ ipsilon_openidc_keyid }}"
IPSILON_OPENIDC_SALT="{{ ipsilon_openidc_salt }}"